Zoom states it will notify the account owner of new subprocessors to the extent required under the applicable contractual agreement, and publishes updates to this page; an email subscription option is also available.
This analysis describes what Zoom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The notification obligation is conditioned on what is 'required under contractual agreement' rather than being a categorical commitment to notify all customers of all changes; organizations that have not contracted for explicit subprocessor notification rights may not receive direct notice of additions and must rely on monitoring this public page or the subscription service.
This provision establishes that new subprocessor notifications are directed to the account owner and are conditioned on contractual requirements rather than provided universally. Organizations that have subscribed to updates or hold DPA terms requiring notification will receive direct notice; others should monitor the public subprocessor page.
Cross-platform context
See how other platforms handle Subprocessor Update Notification Mechanism and similar clauses.
Compare across platforms →"As our business grows and evolves, the Subprocessors we utilize may also change. We will provide the owner of Customer's account with notice of any new Subprocessors to the extent required under contractual agreement, along with posting such updates here. You may also use the form below to subscribe to updates.Excerpt from Zoom's Sub-Processors
1) REGULATORY LANDSCAPE: GDPR Article 28(2) requires that processors inform the controller of intended changes concerning the addition or replacement of subprocessors and that the controller has the opportunity to object.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The notification obligation is conditioned on what is 'required under contractual agreement' rather than being a categorical commitment to notify all customers of all changes; organizations that have not contracted for explicit subprocessor notification rights may not receive direct notice of additions and must rely on monitoring this public page or the subscription service.
This provision establishes that new subprocessor notifications are directed to the account owner and are conditioned on contractual requirements rather than provided universally. Organizations that have subscribed to updates or hold DPA terms requiring notification will receive direct notice; others should monitor the public subprocessor page.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zoom.